Pete's Packet

Limitless

  • Catagories

  • Global visitors

    free counters

  • RSS CCIE Jobs – Metro NY area

    • Wide Area Network Administrator
    • Sr. Network Engineer Cisco - Somerset NJ or Jersey City
      Confidential Company Somerset, NJJob description: ...industry knowledge* Excellent communication and interpersonal skills* Excellent customer presentation skills** Cisco Certifications preferred (CCNA, CCNP,CCIE).We are committed to a policy of Equal Employment opportunity and will not discriminate on any legally...
    • Architect
      Tekmark Global Solutions LLC New York, NYJob description: ...6) Visio drawings 7) Voice/data convergence 8) Data center design 9) Firewalls/security 10) CCIE Written Roles and Responsibilities: -Provide Network Architectural direction to various client outsourced customer accounts-Works with...
    • Senior CISCO Engineer
      Diverse Lynx Llc Union, NJ

Archive for April 9th, 2009

site to site vpn

Posted by Peter Kurdziel on April 9, 2009

R1

crypto isakmp policy 10

encr 3des

authentication pre-share

crypto isakmp key VPNKEY address 192.168.2.2

crypto isakmp invalid-spi-recovery

!

!

crypto ipsec transform-set TS_MD5_TUNNEL esp-3des esp-md5-hmac

crypto ipsec transform-set TS_E3S_TUNNEL esp-3des esp-sha-hmac

!

crypto map CM_VPN 10 ipsec-isakmp

description to R2

set peer 192.168.2.2

set transform-set TS_E3S_TUNNEL

match address VPNACL

qos pre-classify

!

!

!

!

interface Loopback1

ip address 100.1.1.1 255.255.255.0

!

interface Tunnel0

ip address 172.16.1.2 255.255.255.0

tunnel source Loopback1

tunnel destination 10.1.1.1

!

interface Tunnel99

description vpn tunnel to r2

ip unnumbered Loopback1

tunnel source 192.168.10.2

tunnel destination 192.168.2.2

crypto map CM_VPN

!

!

interface Serial1/0

ip address 192.168.10.2 255.255.255.0

serial restart-delay 0

crypto map CM_VPN

!

router eigrp 10

network 100.1.1.1 0.0.0.0

network 172.16.1.0 0.0.0.255

network 192.168.10.0

no auto-summary

!

!

ip access-list extended VPNACL

permit gre host 192.168.10.2 host 192.168.2.2

!

==================================

r2

crypto isakmp policy 10

encr 3des

authentication pre-share

crypto isakmp key VPNKEY address 192.168.10.2

crypto isakmp invalid-spi-recovery

!

!

crypto ipsec transform-set TS_MD5_TUNNEL esp-3des esp-md5-hmac

crypto ipsec transform-set TS_E3S_TUNNEL esp-3des esp-sha-hmac

!

crypto map CM_VPN 10 ipsec-isakmp

description to R1

set peer 192.168.10.2

set transform-set TS_E3S_TUNNEL

match address VPNACL

qos pre-classify

!

!

interface Loopback1

ip address 200.1.1.1 255.255.255.0

!

interface Tunnel0

ip address 172.16.1.3 255.255.255.0

tunnel source Loopback1

tunnel destination 10.1.1.1

!

interface Tunnel99

description vpn to r1

ip unnumbered Loopback1

tunnel source 192.168.2.2

tunnel destination 192.168.10.2

crypto map CM_VPN

!

interface Serial1/0

ip address 192.168.2.2 255.255.255.0

serial restart-delay 0

crypto map CM_VPN

!

router eigrp 10

network 172.16.1.3 0.0.0.0

network 192.168.2.0

network 200.1.1.1 0.0.0.0

no auto-summary

!

!

ip access-list extended VPNACL

permit gre host 192.168.2.2 host 192.168.10.2

Posted in Real World, Security | Leave a Comment »

 
Follow

Get every new post delivered to your Inbox.